---
title: "Rocket Chat OAuth Authentication Setup"
slug: "oauth"
description: "Learn to configure OAuth authentication in Rocket Chat. Enable secure access and integrations across cloud or self-hosted deployments."
status: "update"
updated: 2026-10-26T16:58:15Z
published: 2026-10-26T16:58:15Z
canonical: "docs.rocket.chat/oauth"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://docs.rocket.chat/llms.txt
> Use this file to discover all available pages before exploring further.

# OAuth

Open Authorization (OAuth) is an authorization protocol that acts as an intermediary and facilitates secure access to third-party applications without sharing user credentials, thereby protecting specific resources. Instead of usernames and passwords, OAuth uses tokens, serving as temporary access keys. Rocket.Chat offers integrations with various providers such as Google, Apple, and GitHub. This provides flexibility and security so users can log in with any of these credentials. You can also configure custom OAuth methods.

This section guides you through the required configuration details of each supported method.

## Key features of OAuth integration

- **Controlled access**: With the authentication methods, you can decide which user data the workspace can access.
- **Single Sign-On (SSO)**: Users can sign in to the workspace without creating new usernames and passwords.
- **Flexibility**: You can choose the authentication methods you want to implement in your workspace from the list of available options. Furthermore, you can also set up your own custom OAuth methods in your Rocket.Chat workspace.

## Set up your OAuth method

Go to **Manage → Workspace → Settings → OAuth**. You can view a list of some OAuth methods that are supported by Rocket.Chat, including Google, Apple, GitHub, GitLab, and Nextcloud. Select the method that meets your needs and provide the configuration parameters. Refer to the sub-sections where we go into the details of each method.

## Refresh OAuth services

To update the options shown on your workspace login page based on your saved settings, click **Refresh OAuth Services**.

> [!WARNING]
> **OAuth apps will have full access to user accounts, including the ability to perform any action on behalf of the user. You must proceed carefully while logging in and refuse access if you don’t trust the OAuth app.**

## Add custom OAuth

![](https://cdn.us.document360.io/6ae79a05-7252-45d0-96e8-8f375e07b1b2/Images/Documentation/Premium(1).svg)

> [!WARNING]
> From Rocket.Chat 9.0.0, Custom OAuth is available on Starter workspaces and on all premium plans (Commercial, Government, and Defense). It is not available on Community workspaces. See [Our Plans](/v1/docs/our-plans) for details.

Click **Add custom OAuth** to set up a custom OAuth integration with an identity provider that is not in the list of supported OAuth methods, for example, Auth0. See the [Custom OAuth Setup](/v1/docs/custom-oauth-setup) guide for setup steps.

> [!NOTE]
> You can also create and manage OAuth apps using the REST API endpoints. See the [Create OAuth App](https://developer.rocket.chat/apidocs/create-oauth-app) endpoint for details.

## Server-side OAuth flow

Rocket.Chat completes OAuth sign-in on the server, with CSRF protection, state validation, and Proof Key for Code Exchange (PKCE). This applies to all configured OAuth methods, including custom ones.